IT Specialist (Security & Operating Systems

Job Title

Endpoint Security And Vulnerability Management

In order to qualify for this position, resumes must provide sufficient experience and/or education, knowledge, skills, and ability to perform the duties of the position. Applicant resumes are the key means for evaluating skills, knowledge, and abilities as they relate to this position therefore, applicants are encouraged to be clear and specific when describing experience.

• Manages the end-to-end vulnerability lifecycle for all endpoint devices (Windows, macOS, iOS, Android, Digital Signage, Time Clock) using enterprise tools such as Microsoft Intune, Defender for Endpoints (MDE), proprietary firmware.
• Plans, deploys, and verifies security patches, firmware updates, and configuration changes to ensure compliance with DoD/DoN mandates (e.g., STIGs, IAVMs, Zero Trust).
• Conducts regular vulnerability assessments, analyzes security alerts (e.g., CVEs), and collaborates with cybersecurity teams to respond to incidents and maintain system Authority to Operate (ATO). Monitors endpoints for threats, intrusions, and anomalous activity, taking corrective action to mitigate risks.
• Develops and maintains automation scripts (e.g., Power Shell) to enforce security configurations and streamline reporting for audits.

• Develops, maintains, and deploys secure baseline images for Windows and macOS operating systems.
• Develops, maintains, and deploys iOS and Android operating systems and profiles.
• Provisions, configures, and manages the lifecycle of physical and virtual devices within the NAF enterprise, including desktops, laptops, tablets, and POS systems.
• Administers cloud-based identity and access management through Azure/Entra  enforces endpoint policies via Intune and Group Policy Objects (GPOs).
• Installs, configures, and maintains operating systems and software supporting NAF business operations in retail, hospitality, and MWR.
• Perform assessment, analysis for solution, implementation of corrective action to resolve device cyber security compliance discrepancies.

• Provides Tier II/III technical support for complex hardware, software, and security-related issues.
• Acts as a subject matter expert, consulting with program managers and users to analyze requirements and recommend secure technology solutions.
• Develops and maintains technical documentation, solution guides, and knowledgebase articles to support staff and standardize processes.
• Presents informal training to users on cybersecurity best practices.
• Serves as Contracting Officer Representative (COR) or Assistant Contracting Officer Representative (ACOR) or Technical Advisor (TA) as required.